PT-2024-12400 · Wearables · Wearables

Name of the Vulnerable Software and Affected Versions: Wearables affected versions not specified Description: The issue is related to memory corruption in wearables when processing data from AON. Recommendations: At the moment, there is no information about a newer version that contains a fix for...

PT-2024-12373 · Unknown · Coreservices

Name of the Vulnerable Software and Affected Versions: Core services affected versions not specified Description: The issue is related to information disclosure in Core services when processing a Diag command. Recommendations: At the moment, there is no information about a newer version that...

PT-2024-13086 · Bluetooth · Bluetooth

Name of the Vulnerable Software and Affected Versions: Bluetooth affected versions not specified Description: The issue occurs when parsing GATT service data and the total amount of memory required by multiple services exceeds the actual size of the services buffer, leading to a transient Denial ...

PT-2024-15286 · Pure Storage · Flasharray Purity

Name of the Vulnerable Software and Affected Versions: FlashArray Purity affected versions not specified Description: A condition exists in FlashArray Purity whereby a local account intended for initial array configuration remains active, potentially allowing a malicious actor to gain elevated...

PT-2024-12368 · Modem Emm · Modem Emm

Name of the Vulnerable Software and Affected Versions: Modem EMM affected versions not specified Description: The issue is related to a possible system crash in the modem EMM due to improper input validation. This could lead to a remote denial of service with no additional execution privileges...

PT-2023-18932 · Huawei · Honor

Name of the Vulnerable Software and Affected Versions: Honor products affected versions not specified Description: The issue concerns a file writing vulnerability. Successful exploitation of this vulnerability could lead to code execution. Recommendations: At the moment, there is no information...

PT-2023-31826 · Huawei · Honor

Name of the Vulnerable Software and Affected Versions: Honor products affected versions not specified Description: The issue is related to incorrect privilege assignment, which could lead to information leak if successfully exploited. Recommendations: At the moment, there is no information about ...

PT-2023-18942 · Huawei · Honor

Name of the Vulnerable Software and Affected Versions: Honor products affected versions not specified Description: The issue is related to an information leak, where successful exploitation could cause the leak of information. There is no information provided about the estimated number of...

PT-2023-18946 · Huawei · Honor

Name of the Vulnerable Software and Affected Versions: Honor products affected versions not specified Description: The issue is related to incorrect privilege assignment, which could lead to device service exceptions if successfully exploited. Recommendations: At the moment, there is no informati...

PT-2023-31824 · Huawei · Honor

Name of the Vulnerable Software and Affected Versions: Honor products affected versions not specified Description: The issue is related to a type confusion vulnerability. Successful exploitation of this vulnerability could cause an information leak. Recommendations: At the moment, there is no...

PT-2023-18947 · Huawei · Honor

Name of the Vulnerable Software and Affected Versions: Honor products affected versions not specified Description: The issue is related to an information leak, where successful exploitation could cause the leak of information. There is no mention of the estimated number of potentially affected...

PT-2023-18940 · Huawei · Honor

Name of the Vulnerable Software and Affected Versions: Honor products affected versions not specified Description: The issue is related to a signature management vulnerability. Successful exploitation could cause a forged system file to overwrite the correct system file. There is no information...

PT-2023-8708 · Unknown · Myq Print Server

Name of the Vulnerable Software and Affected Versions: MyQ Print Server affected versions not specified Description: The issue is related to incorrect code generation management in the MyQ Print Server, allowing a remote attacker to execute arbitrary code. This could potentially expose sensitive...

PT-2023-29653 · Hcl · Hcl Launch

Name of the Vulnerable Software and Affected Versions: HCL Launch affected versions not specified Description: The issue allows a user to embed arbitrary HTML tags in the Web UI, potentially leading to sensitive information disclosure. This is due to an HTML injection vulnerability...

PT-2023-31852 · Foxit · Foxit Pdf Reader

Name of the Vulnerable Software and Affected Versions: Foxit PDF Reader affected versions not specified Description: This issue allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader. User interaction is required to exploit this, where the target...

PT-2023-32825

Name of the Vulnerable Software and Affected Versions MLflow affected versions not specified Description The issue allows attackers to gain full command execution on the victim system with only one user interaction, which involves downloading a malicious config. This is related to a Command...

PT-2023-8850 · Zabbix +4 · Zabbix Agent 2 +5

Name of the Vulnerable Software and Affected Versions: Zabbix Agent 2 affected versions not specified Description: The issue is related to the Zabbix Agent 2 item key smart.disk.get not sanitizing its parameters before passing them to a shell command, which could lead to remote code execution. Th...

PT-2023-23674 · Bosch · Bosch Bt

Name of the Vulnerable Software and Affected Versions: Bosch BT software products affected versions not specified Description: The issue is related to the improper handling of a malformed API request to an API server in Bosch BT software products. This can allow an unauthenticated attacker to cau...

PT-2023-32082 · Unknown · Infinispan

Name of the Vulnerable Software and Affected Versions: Infinispan affected versions not specified Description: A flaw was found in the serialization of cache configurations to XML, JSON, or YAML formats, which can contain credentials such as those used in JDBC stores with connection pooling or...

PT-2023-8401 · Unknown +5 · Dns Server +5

Name of the Vulnerable Software and Affected Versions: DNS server affected versions not specified Description: The issue is caused by an improper check for RDLENGTH overflow in the buffer in response from the DNS server. This can lead to a buffer overflow. The vulnerability is related to...